Privacy policy

Last updated: 22 September 2026.

Data controller and contact

The controller of personal data of FERRUVIO customers is Fritech sp. z o.o., ul. Jeżynowa 12, 62-023 Borówiec, Poland, NIP 7773396676, KRS 0000999470. For personal data enquiries, contact biuro@fritech.pl, telephone +48 782 605 336, or write to the address above. FERRUVIO is a brand operated by Fritech.

What data we process and why

  • Enquiries, quotations and orders: contact details, delivery and billing addresses, the selected product and its specifications, correspondence, and order and payment information. The legal basis is taking steps prior to entering into a contract or performing a contract — Article 6(1)(b) GDPR. We also process details of business representatives and contact persons for our legitimate interest in managing business relationships — Article 6(1)(f) GDPR.
  • Accounts, invoices and statutory obligations: information required by tax, accounting and consumer protection law — Article 6(1)(c) GDPR.
  • Complaints, returns, disputes and security: data needed to comply with statutory obligations, handle requests, and establish, exercise or defend legal claims. The legal basis is Article 6(1)(b), (c) or (f) GDPR, depending on the purpose. Our legitimate interest is protecting the rights of our business and customers and keeping the store secure.
  • Website operation: IP address, device and browser information, store events, shopping cart contents and essential session identifiers. This data supports store operation and fraud prevention, on the basis of Article 6(1)(b) or (f) GDPR.
  • Optional analytics, personalisation and advertising: activity data and browser identifiers processed using technologies that require consent — Article 6(1)(a) GDPR. We send email marketing after obtaining any consent required by law. Marketing consent is not a condition of purchase.

We receive data from you, from your activity in the store, and from payment and delivery service providers. Providing information needed for a quotation, purchase or delivery is voluntary, but we cannot provide the relevant service without it. Information required for accounting documents is prescribed by law. Do not send us your card number, CVV or password; enter payment details only in the payment provider’s form.

Shopify and other recipients

The store is hosted on Shopify. Shopify processes data relating to store visits and purchases. Depending on the function, it acts on our behalf or as an independent controller. We use Shopify Network Intelligence: certain features use data about interactions with FERRUVIO, other merchants and Shopify. Information may be shared with Shopify and service providers operating in other countries. Use of data for optional advertising and tracking technologies is subject to your consent choices.

See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal, where you can also exercise your rights in relation to Shopify.

Payment providers, carriers and transport organisers receive the data necessary to fulfil an order. Authorised Fritech personnel, IT, email and accounting service providers, advisers and public authorities may also receive data where there is an appropriate legal basis. We do not share data with every carrier; the information shared depends on the actual fulfilment of the order.

Transfers outside the European Economic Area

Shopify and its service providers may process data outside the EEA. Transfers use appropriate safeguards under the GDPR, such as an adequacy decision, standard contractual clauses or other permitted mechanisms. Information about Shopify’s safeguards and recipients is available in the Shopify Data Processing Addendum. You can ask us for further information or a copy of the applicable safeguards.

How long we keep data

  • Quotation and correspondence data: for as long as needed to respond and handle the matter; if it forms part of contract or claim records, until the applicable limitation period expires.
  • Order, complaint and return data: for the performance of the contract and handling of requests, then for any legally required period or as needed to exercise or defend legal claims.
  • Tax and accounting records: for the statutory retention period applicable to the document, calculated under tax and accounting rules.
  • Data processed on consent: until consent is withdrawn or the purpose ends earlier. We may retain records of consent and withdrawal where needed to demonstrate legal compliance.
  • Technical data and cookies: for the period needed for the relevant function, according to the cookie’s lifetime and your consent choices. Data relating to detected misuse may be kept until the matter is resolved and the limitation period for claims expires.

Cookies and your choices

Essential cookies support the website, shopping cart and security. Optional analytics, advertising and personalisation cookies that require consent are activated according to your banner choices. You can reject them and continue using the store. You can change your choices or withdraw consent through the privacy settings available in the store. You can also manage cookies in your browser; deleting essential cookies may interrupt your cart or login. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Your rights

Subject to the GDPR, you have the right to access your data and receive a copy, have it corrected or erased, restrict its processing, and obtain data portability. You may object to processing based on legitimate interests, including direct marketing at any time, and withdraw consent. Write to biuro@fritech.pl. We may request information needed to confirm your identity so that data is not disclosed to the wrong person.

You may lodge a complaint with the President of the Polish Personal Data Protection Office (uodo.gov.pl) or another competent EU supervisory authority. Updates to this policy are published on this page with the date of change and do not limit your statutory rights.